Cursor Agent a1d1906025 fix(mcp): static headers win over forwarded headers in OpenAPI MCP ... Match the existing MCP invariant in merge_mcp_headers and the managed MCP path: operator-configured static headers always override caller-forwarded headers on name conflict, with case-insensitive comparison so different casing cannot bypass the precedence. _request_auth_header (BYOK) still overrides Authorization last. Addresses Veria review on PR #27383. Co-authored-by: Mateo Wang <mateo-berri@users.noreply.github.com>		2026-05-12 23:33:37 +03:00
..
mcp_server	fix(mcp): static headers win over forwarded headers in OpenAPI MCP	2026-05-12 23:33:37 +03:00